Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
File: RruCFbImbaPA9spVzHuoAOmt4qI.mft (raw, json)
Hash identifier: bIJk9+u1YvI5UsWIMQXTVKiQeUBp9Mu69VfaPJwgBg8=
Subject key identifier: 6A:A2:C5:44:CD:BD:95:2F:D7:1C:18:0D:5F:8E:AA:19:51:D0:68:68
Authority key identifier: 46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
Certificate issuer: /CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Certificate serial: 019D27049EC21C597E4CE21CC04A1B566C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: JQe-48FV5Y-itIVBDnGCRqGeVgA.roa (hash: S5b8k+IfVhZdFCKCEsxVom3++MXYD9JakutOwlvMZcA=)
2: RruCFbImbaPA9spVzHuoAOmt4qI.crl (hash: JBu6N5me9CoBPemv2JNRGgdG6RhN4bXJKyvFqBEMqcg=)
3: ZqVGldv9ZJCUDTLeSn1C0d7I18g.roa (hash: uIgPK/yujRKyFi+4ZNmbB0CRvDlTsSwPRJk2iQzEWQU=)
4: rC0-8rrLIgHUERw1MQ4a8HsiTH4.roa (hash: 48aDi04DL3xSu0Qz3vO8DwV+zWYNyVlZoEWSWFScLzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9e:c2:1c:59:7e:4c:e2:1c:c0:4a:1b:56:6c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46bb8215b2266da3c0f6ca55cc7ba800e9ade2a2
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=6aa2c544cdbd952fd71c180d5f8eaa1951d06868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:77:70:a0:8a:97:27:4d:5c:5f:42:19:da:
49:86:7d:98:ba:8e:80:64:83:2e:92:3f:1d:13:64:
13:46:f1:78:ed:71:9f:4f:5c:a2:02:34:c8:42:3f:
72:b1:1d:81:ef:2d:09:60:2a:34:d0:8d:f1:b4:57:
c0:da:06:d0:c7:9b:1e:e2:de:9a:bc:77:c9:63:66:
9a:fb:41:1f:11:0b:dd:d4:de:9e:2f:96:f9:89:66:
b8:aa:d8:03:c0:a9:ef:dc:c2:3f:16:d0:03:14:ea:
ed:d3:7c:9b:59:0e:5f:f9:5b:ae:cc:21:ad:83:7e:
bf:9c:dc:1e:4a:73:b2:a0:2d:a8:e2:d8:41:0d:ca:
bd:84:25:79:58:a7:a7:3c:97:93:2d:30:fa:70:67:
b5:2e:37:77:46:5b:13:3e:9d:8e:97:f1:3b:39:ff:
93:74:27:bc:72:5e:1a:be:e1:19:9c:98:ff:eb:db:
ef:5e:40:e1:b3:87:22:8a:66:3d:bf:55:92:eb:9f:
18:b6:4d:87:cc:31:26:89:a2:5a:35:1b:c0:b0:18:
45:bf:5e:bb:e7:ac:08:3e:f6:c7:ac:75:a3:96:16:
93:6c:30:83:74:cc:68:62:f6:e5:f3:6d:ab:c9:88:
f2:e1:a2:14:3b:98:ff:28:a5:86:40:85:45:cd:ac:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:C5:44:CD:BD:95:2F:D7:1C:18:0D:5F:8E:AA:19:51:D0:68:68
X509v3 Authority Key Identifier:
keyid:46:BB:82:15:B2:26:6D:A3:C0:F6:CA:55:CC:7B:A8:00:E9:AD:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RruCFbImbaPA9spVzHuoAOmt4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/RruCFbImbaPA9spVzHuoAOmt4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:79:79:d1:44:a9:f7:63:cf:2d:8a:a6:68:ad:8a:3a:fb:d6:
72:11:a0:72:6a:bd:8a:f8:8f:1d:c1:2a:f6:72:ee:98:1e:c8:
50:35:a9:c2:25:41:71:99:9d:2f:b4:15:69:ec:21:50:02:4c:
bd:9e:fe:66:f2:66:f2:6f:4c:12:61:4b:39:90:72:a8:ff:66:
ce:a6:5c:79:2f:6a:2c:a9:89:3b:12:26:28:43:45:9a:e8:b2:
91:44:8e:f0:eb:ed:9f:bd:93:54:76:47:53:11:5e:25:46:b0:
08:d6:75:47:74:97:d7:f1:35:9b:ee:e7:58:0b:1c:7c:d3:75:
7a:55:1a:c4:7a:1a:2c:0f:85:ab:1d:a6:be:cb:ab:14:e4:0c:
9e:0e:a5:37:a2:64:48:3b:5b:88:d4:76:2b:bf:15:8c:dd:e1:
5d:04:71:9d:51:e8:f8:38:8f:2b:fd:c1:eb:be:63:06:84:56:
1a:f3:77:d2:a8:c2:54:6e:52:8c:ee:32:94:b1:28:d0:20:f8:
6c:10:cb:85:22:f6:26:25:68:91:e1:3f:e3:1c:d9:ab:c9:38:
30:b3:9e:56:e4:07:a8:ea:4a:e0:7a:57:77:e0:6e:ad:02:c8:
30:ae:90:fb:66:83:59:2a:f1:66:ac:1f:a7:ce:52:5a:31:4a:
b2:af:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:23 2026 by rpki-client